Black Hat USA 2013 - Android: one root to own them all

By: Jeff Forristal

This presentation is a case study showcasing the technical details of Android security bug 8219321, disclosed to Google in February 2013. The vulnerability involves discrepancies in how Android applications are cryptographically verified & installed, allowing for APK code modification without breaking the cryptographic signature; that in turn is a simple step away from system access & control. The vulnerability affects a wide number of Android devices, across generations & architectures, with little to no modifications of the exploit. The presentation will review how the vulnerability was located, how an exploit was created, and why the exploit works, giving you insight into the vulnerability problem and the exploitation process. Working PoCs for major Android device vendors will be made available to coincide with the presentation.

Black Hat USA 2013 - Android: one root to own them all blackhat 2015
6 Likes	6 Dislikes
1,120 views views	117K followers
People & Blogs	Upload TimePublished on 3 Dec 2013

Related keywords

infosec news,information security manager,blackhat asia 2019,blackhat 2019,infosec twitter,blackhat 2018,briefings on apcs,black hat seo technique,blackhat europe,briefings on hospital safety,blackhat badger sekiro,briefings from goldman sachs,black hat x reader,black hat cartoon,black hat x dr flug,cyber securityとは,briefings dcuo,blackhat conference 2019,cyber security cloud,briefings on accreditation and quality,black hat full movie,briefings in bioinformatics abbreviation,briefing source,blackhat badger,blackhat forum,information security foundation 勉強,infosec rotkreuz,cyber security framework,information security policy template,infosecurity utrecht,infosec ups system,cyber security news,cyber security act,briefings synonym,infosecurity,blackhat full movie,infosec blog,black hat badger,information security foundation 参考書,information security management system,cyber security conference,briefings on hipaa,briefings in bioinformatics impact factor,black hat seo,cyber security pro,black hat movie,blackhat imdb,infosec podcast,black hat cast,cyber security pro 新しいネットワークが検出されました,cyber security cloud managed rules,briefings app,cyber security measures,information security governance,infosec global,infosecurity europe 2020,briefings for brexit,infosec health,infosec magazine,information security 日本語,infosec 19,black hat anime,briefings in functional genomics,information security foundation,infosecurity magazine,cyber security tokyo,black hat meaning,briefings on coding compliance strategies,black hatch,information security definition,briefings magazine,briefings in real estate finance,briefings media group,information security pdf,infosec europe 2019,cyber security market,infosec institute,infosec 2019 london,information security foundation 難易度,black hatch gamefowl,cyber security management system,information security certifications,blackhat film,cyber security pro アンインストール,briefing on the joint commission,information security specialist,cyber security 意味,cyber security analyst,information security policy,black hat usa 2019,information security forum,information security news,http://briefing.com,infosec conferences,information security officer,infosekta,cyber security japan,blackhat trailer,information security analyst,cyber security university,black hat hacker,black hat forum,cyber security company,black hat hacking,black hat villainous,blackhat conference,briefings definition,information security foundation based on iso/iec 27001,blackhat usa,cyber security report,blackhatworld,black hat x demencia,information security management,blackhat cast,black hat 2019,infosec reactions,